84 matches found
awesome-ai-security
Awesome AI Security A curated list of awesome AI security related frameworks, standards, learning resources and open source tools. If you want to contribute, create a PR or contact me @ottosulin. Table of Contents Learning Resources Reading & Guides Courses, Labs & CTFs Podcasts Governance & Risk...
An-Integrated-Wireless-Network-Forensic-Analysis-Framework
An-Integrated-Wireless-Network-Forensic-Analysis-Framework This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able to capture wireless network traffic, to analyze the captured traffic according to the...
git-all-secrets
git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...
awesome-rat
All Resource Collection Projects RAT 2500+ open source RAT/C&C tools, 1200+ blogs and video about RAT/C&C analysis. 中文版本 Directory Popular Tools pupy - 1Tools 6Post Covenant - 3Tools 18Post Slackor - 1Tools 3Post QuasarRAT - 1Tools 9Post EvilOSX - 1Tools 9Post Merlin - 1Tools 3Post Commercial Too...
TekDefense
TekDefense TekDefense のオープン開発プロジェクト すべてのプロジェクトは MIT ライセンスモデルを採用しています。基本的に、これらのプロジェクトはご自由にご利用いただけますが、これらのプロジェクトの使用または変更によって生じたいかなる損失や損害についても、当方は責任を負いかねます。 InfoSec に関する記事や解説ビデオについては、www.TekDefense.com をご覧ください。 Twitter で @TekDefense をフォローしてください。 メール: [email protected] ありがとうございます。 -Ian...
Red-Teaming-Toolkit
Red Teaming Toolkit This repository contains cutting-edge open-source security tools OST that will help you during adversary simulation and as information intended for threat hunter can make detection and prevention control easier. The list of tools below that could be potentially misused by thre...
pentagi
PentAGI P enetration testing A rtificial G eneral I ntelligence Join the Community! Connect with security researchers, AI enthusiasts, and fellow ethical hackers. Get support, share insights, and stay updated with the latest PentAGI developments. ⠀ Table of Contents Overview Features Architecture...
digital-forensics-lab
デジタルフォレンジックスラボ & 共有サイバーフォレンジックインテリジェンスリポジトリ リポジトリの特徴 インタラクティブなデジタルフォレンジックスラボ: 学生と教員の関与に特化 Linux中心のラボ環境: すべてのラボでKali Linuxのみを使用 視覚的学習サポート: 各ラボにはPowerPointプレゼンテーション、関連ファイル、指導用スクリーンショットが含まれます 包括的なカバレッジ: デジタルフォレンジックス分野の幅広いトピックを網羅 オープンソースツール: 使用するすべてのツールは無料で入手可能なオープンソースです 継続的なアップデート:...
scriptkiddi3
Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...
libvshadow
libvshadow is a library to access the Volume Shadow Snapshot VSS format. The VSS format is used by Windows, as of Vista, to maintain copies of data on a storage media volume. Project information: Status: alpha Licence: LGPL-3.0-or-later Also see: OSDFC 2012: Paper - Windowless Shadow Snapshots:...
rekall
Rekall discontinuation This project is no longer maintained. In December 2011, a new branch within the Volatility project was created to explore how to make the code base more modular, improve performance, and increase usability. This branch was later forked to become Rekall. The modularity allow...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
UAT-8302 and its box full of malware
Cisco Talos is disclosing UAT-8302, a sophisticated, China-nexus advanced persistent threat APT group targeting government entities in South America since at least late 2024 and government agencies in southeastern Europe in 2025. After successful compromises, UAT-8302 deploys multiple custom-made...
Automated Generation of Cybersecurity Exercise Scenarios
There is a growing need for cybersecurity professionals with practical knowledge and experience to meet societal needs and comply with new standards and regulations. At the same time, the advances in software technology and artificial intelligence point towards a future where software agents will...
CVE-2025-66215 OpenSC: Stack-buffer-overflow WRITE in card-oberthur
OpenSC is an open source smart card tools and middleware. Prior to version 0.27.0, an attacker with physical access to the computer at the time user or administrator uses a token can cause a stack-buffer-overflow WRITE in card-oberthur. The attack requires crafted USB device or smart card that...
AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities
From an Anthropic blog post: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. This illustrates h...
AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities
Really interesting blog post from Anthropic: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. Th...
Zero-Day Zero: The AI Attack That Just Ended the Era of the Forgiving Internet
Why the Exploit Window Has Collapsed and How CISOs Must Pivot to Survive For decades, cybersecurity was a game of time. We banked on the buffer between a vulnerability’s disclosure and its widespread exploitation. We relied on the forgiving internet, where human attackers needed days or weeks to...
Mysterious Elephant: a growing threat
Introduction Mysterious Elephant is a highly active advanced persistent threat APT group that we at Kaspersky GReAT discovered in 2023. It has been consistently evolving and adapting its tactics, techniques, and procedures TTPs to stay under the radar. With a primary focus on targeting government...
